General

  • Target

    JaffaCakes118_352890a11da33b3aa604c2e1739eecf5

  • Size

    68KB

  • Sample

    250126-nr4gca1qbq

  • MD5

    352890a11da33b3aa604c2e1739eecf5

  • SHA1

    cf2e5de5540f9c4194d5e560684a086883424f50

  • SHA256

    56e5c33cd341d19a0b23e1b4cbe968a8ed2bc85a4997a21d32cc1be438136505

  • SHA512

    eb485502a7ea69337d22876b0ea930ca41aef505b90665564f33cf452b637f7cdf548b16ce5ed0405e05ce637ecb0c39c19dcc8bba3f62d8af739ac3e937f5bb

  • SSDEEP

    768:48m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiZKPA+7XoS:asq+QV4rObAdXWpf/y+7ozNwiFo3JL

Malware Config

Extracted

Family

xtremerat

C2

a1a1a1b2b2b2.selfip.com

Targets

    • Target

      JaffaCakes118_352890a11da33b3aa604c2e1739eecf5

    • Size

      68KB

    • MD5

      352890a11da33b3aa604c2e1739eecf5

    • SHA1

      cf2e5de5540f9c4194d5e560684a086883424f50

    • SHA256

      56e5c33cd341d19a0b23e1b4cbe968a8ed2bc85a4997a21d32cc1be438136505

    • SHA512

      eb485502a7ea69337d22876b0ea930ca41aef505b90665564f33cf452b637f7cdf548b16ce5ed0405e05ce637ecb0c39c19dcc8bba3f62d8af739ac3e937f5bb

    • SSDEEP

      768:48m1Sq4NQErBsH1tzoisBKQI6dObAG/dq8uW29Ifnca/yyR+P2ujfGiZKPA+7XoS:asq+QV4rObAdXWpf/y+7ozNwiFo3JL

    • Detect XtremeRAT payload

    • XtremeRAT

      The XtremeRAT was developed by xtremecoder and has been available since at least 2010, and written in Delphi.

    • Xtremerat family

MITRE ATT&CK Enterprise v15

Tasks